Files
network-documentation/README.md

283 lines
12 KiB
Markdown
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Red y Homelab - Consultoria-AS
## Resumen de Infraestructura
- **IP Publica**: 201.142.180.120 (dinamica)
- **ISP**: Infinitum (Telmex)
- **Modem/Gateway**: 192.168.10.254
- **Red principal**: 192.168.10.0/24
- **Reverse Proxy**: Caddy (en container Dockge, 192.168.10.74)
- **DNS**: Cloudflare (consultoria-as.com) + AWS Route 53 (horuxfin.com)
- **Monitoreo**: UptimeKuma (https://status.consultoria-as.com)
## Servidores Fisicos
### Servidor 1: TYAN (192.168.10.3)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | Consultoria-AS |
| **PVE Version** | 8.4.14 |
| **CPU** | Intel Xeon Gold 5120 @ 2.20GHz (14c/28t) |
| **RAM** | 755 GB |
| **Disco root** | 64 GB |
| **Acceso** | https://192.168.10.3:8006 |
### Servidor 2: Dell T430 #1 Cisco1 (192.168.10.185)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | Cisco1 |
| **PVE Version** | 8.4.14 |
| **CPU** | Intel Xeon E5-2609 v4 @ 1.70GHz (16c/16t, 2 sockets) |
| **RAM** | 755 GB |
| **Disco root** | 94 GB |
| **Acceso** | https://192.168.10.185:8006 |
### Servidor 3: Dell T430 #2 DellT430-2 (192.168.10.187)
| Caracteristica | Valor |
|---|---|
| **Nodo Proxmox** | DellT430-2 |
| **PVE Version** | 9.1.2 |
| **CPU** | Intel Xeon E5-2620 v4 @ 2.10GHz (8c/16t) |
| **RAM** | 126 GB |
| **Disco root** | 94 GB |
| **Acceso** | https://192.168.10.187:8006 |
### Servidor 4: Ryzen PC - AI Server (192.168.10.144)
| Caracteristica | Valor |
|---|---|
| **OS** | Ubuntu 24.04 (bare metal) |
| **CPU** | AMD Ryzen 7 7700X |
| **RAM** | 32 GB |
| **GPU** | NVIDIA RTX 3060 |
| **Servicio** | Ollama (LLM inference) |
| **Acceso SSH** | ssh consultoria-as@192.168.10.144 |
## VMs y Containers
### Servidor TYAN (192.168.10.3)
| VMID | Nombre | Tipo | IP Estatica | MAC | RAM | Funcion | URL Externa |
|---|---|---|---|---|---|---|---|
| 100 | OMV | VM | 192.168.10.75 | - | 8 GB | NAS/Nube (SMB) | `\\192.168.10.75\VAULT-OMV` |
| 102 | Dashy | LXC | 192.168.10.86 | BC:24:11:EB:9A:4F | 2 GB | Dashboard | - |
| 104 | Immich | LXC | 192.168.10.78 | BC:24:11:2E:96:EC | 6 GB | Fotos | https://immich.consultoria-as.com |
| 105 | Hotel Hacienda | LXC | 192.168.10.167 | BC:24:11:7C:01:9B | 16 GB | Gestion Hotel | https://hacienda.consultoria-as.com |
| 106 | Dockge | LXC | 192.168.10.74 | BC:24:11:DD:C9:B9 | 40 GB | Multimedia/Docker/Caddy | http://192.168.10.74:5001 |
| 108 | n8n | LXC | 192.168.10.83 | BC:24:11:11:FC:30 | 8 GB | Automatizacion | https://n8n.consultoria-as.com |
| 109 | Navidrome | LXC | 192.168.10.85 | BC:24:11:2B:49:23 | 10 GB | Musica | https://navidrome.consultoria-as.com |
| 110 | UptimeKuma | LXC | 192.168.10.87 | BC:24:11:22:73:8C | 1 GB | Monitoreo | https://status.consultoria-as.com |
| 111 | Metabase | LXC | 192.168.10.170 | BC:24:11:85:90:87 | 20 GB | Analytics | https://metabase.consultoria-as.com |
| 112 | Gitea | LXC | 192.168.10.69 | BC:24:11:30:EF:4E | 10 GB | Git | https://git.consultoria-as.com |
### Servidor Dell T430 #1 Cisco1 (192.168.10.185)
| VMID | Nombre | Tipo | IP Estatica | MAC | RAM | Funcion | URL |
|---|---|---|---|---|---|---|---|
| 100 | OpenClaw | VM | 192.168.10.105 | 02:57:2C:98:3E:34 | 64 GB | Bot WhatsApp + ClawLibrary | https://192.168.10.105 |
| 101 | OpenWebUI | LXC | 192.168.10.135 | BC:24:11:8F:0F:87 | 40 GB | Interfaz Web AI (Ollama) | http://192.168.10.135:8080 |
| 102 | CraneGOO | VM | 192.168.10.140 | 02:C9:63:B1:E2:D5 | 8 GB | Proyecto CraneGOO | http://192.168.10.140 |
| 106 | AfterlifeProject | VM | - | 02:67:B8:4F:80:B4 | 41 GB | Proyecto Afterlife | Pendiente |
### Servidor Dell T430 #2 DellT430-2 (192.168.10.187)
| VMID | Nombre | Tipo | IP Estatica | MAC | RAM | Funcion | URL Externa |
|---|---|---|---|---|---|---|---|
| 100 | SKEEN.MX | VM | 192.168.10.100 | 02:7C:23:A0:4A:1C | 16 GB | Proyecto SKEEN | - |
| 101 | CocinaConAlma (Tandoor) | VM | 192.168.10.156 | 02:71:EC:C8:90:07 | 8 GB | Recetas - Negocio comida | https://recetas.consultoria-as.com |
| 102 | Odoo | LXC | DHCP | - | 16 GB | ERP | https://odoo.consultoria-as.com |
| 103 | NodeBB | LXC | 192.168.10.73 | BC:24:11:36:90:2C | 8 GB | Foro | https://foro.consultoria-as.com |
| 104 | Autopartes | VM | 192.168.10.91 | 02:CD:37:96:6B:4F | 50 GB | Sistema Autopartes | https://nexus.consultoria-as.com |
| 106 | CAS-PaginasWeb | VM | 192.168.10.92 | 02:49:5F:9E:62:EC | 8 GB | Paginas Web | cronicas/pagoda.consultoria-as.com |
| 108 | Horux | VM | 192.168.10.90 | 02:BF:A9:58:B9:04 | 24 GB | Gestion Horux | https://horuxfin.com |
| 111 | SocialAutomation | VM | DHCP | 02:6F:24:5E:4F:1C | 8 GB | Automatizacion Social | - |
| 112 | Padel | VM | DHCP | 02:EB:58:2C:9E:1A | 8 GB | Proyecto Padel | - |
| 113 | MSP | VM | 192.168.10.97 | 02:DD:3B:3E:16:90 | 20 GB | MeshCentral/MSP | https://mesh.consultoria-as.com |
### Servidor Ryzen PC (192.168.10.144)
| Servicio | Puerto | Funcion | Modelo |
|---|---|---|---|
| Ollama | 11434 | LLM inference con GPU | qwen3.5:9b |
## Servicios Web y URLs
### Servicios con acceso externo (via Caddy reverse proxy)
| Servicio | URL Externa | IP:Puerto Interno | DNS | Estado |
|---|---|---|---|---|
| Jellyfin | https://jellyfin.consultoria-as.com | 127.0.0.1:8096 (Dockge) | Cloudflare | OK |
| Jellyseerr | https://mediarequest.consultoria-as.com | 127.0.0.1:5055 (Dockge) | Cloudflare | OK |
| Immich | https://immich.consultoria-as.com | 192.168.10.78:2283 | Cloudflare | OK |
| Odoo | https://odoo.consultoria-as.com | 192.168.10.81:8069 | Cloudflare | OK |
| n8n | https://n8n.consultoria-as.com | 192.168.10.83:5678 | Cloudflare | OK |
| Horux | https://horuxfin.com | 192.168.10.90:3000 | AWS Route 53 | OK |
| Hotel Hacienda | https://hacienda.consultoria-as.com | 192.168.10.167:5172 | Cloudflare | OK |
| API Hotel | https://api-hacienda.consultoria-as.com | 192.168.10.167:4000 | Cloudflare | OK |
| Metabase | https://metabase.consultoria-as.com | 192.168.10.170:3000 | Cloudflare | OK |
| Autopartes | https://nexus.consultoria-as.com | 192.168.10.91:5000 | Cloudflare | OK |
| Gitea | https://git.consultoria-as.com | 192.168.10.69:3000 | Cloudflare | OK |
| Navidrome | https://navidrome.consultoria-as.com | 192.168.10.85:4533 | Cloudflare | OK |
| NodeBB | https://foro.consultoria-as.com | 192.168.10.73:4567 | Cloudflare | OK |
| UptimeKuma | https://status.consultoria-as.com | 192.168.10.87:3001 | Cloudflare | OK |
| Cronicas | https://cronicas.consultoria-as.com | 192.168.10.92:3000 | Cloudflare | OK |
| Pagoda | https://pagoda.consultoria-as.com | 192.168.10.92:3001 | Cloudflare | OK |
| MeshCentral | https://mesh.consultoria-as.com | 192.168.10.97:4443 (HTTPS) | Cloudflare | OK |
| Recetas (Tandoor) | https://recetas.consultoria-as.com | 192.168.10.156:8080 | Cloudflare | OK |
### Servicios solo acceso local
| Servicio | URL Local |
|---|---|
| OMV (NAS) | http://192.168.10.75 / `\\192.168.10.75\VAULT-OMV` |
| Dockge | http://192.168.10.74:5001 |
| qBittorrent | http://192.168.10.74:8080 |
| Sonarr | http://192.168.10.74:8989 |
| Radarr | http://192.168.10.74:7878 |
| Prowlarr | http://192.168.10.74:9696 |
| Bazarr | http://192.168.10.74:6767 |
| OpenClaw | https://192.168.10.105 |
| ClawLibrary | http://192.168.10.105:5173 |
| OpenWebUI | http://192.168.10.135:8080 |
| CraneGOO | http://192.168.10.140 |
| Ollama API | http://192.168.10.144:11434 |
| Proxmox TYAN | https://192.168.10.3:8006 |
| Proxmox Dell185 | https://192.168.10.185:8006 |
| Proxmox Dell187 | https://192.168.10.187:8006 |
## Red
### Topologia
`
Internet
|
Modem ISP (192.168.10.254)
|
Switch Cisco (administrable)
|
+-- Servidor TYAN (192.168.10.3)
+-- Servidor Dell T430 #1 (192.168.10.185)
+-- Servidor Dell T430 #2 (192.168.10.187)
+-- Servidor Ryzen AI (192.168.10.144)
+-- PCs de oficina
+-- Otros dispositivos
`
### Port Forwarding (Modem)
| Puerto Externo | Destino | Puerto Interno | Servicio |
|---|---|---|---|
| 80 | 192.168.10.74 | 80 | Caddy (HTTP/ACME) |
| 443 | 192.168.10.74 | 443 | Caddy (HTTPS) |
### Reverse Proxy (Caddy)
- **Ubicacion**: Container Dockge (VMID 106, TYAN)
- **IP**: 192.168.10.74
- **Modo**: Docker container con --network host
- **SSL**: Automatico via Lets Encrypt
- **Config**: /opt/caddy/Caddyfile
### Asignacion de IPs (Todas Estaticas)
| IP | Dispositivo/Servicio | MAC |
|---|---|---|
| 192.168.10.3 | Proxmox TYAN | - |
| 192.168.10.67 | **Dispositivo Dell desconocido** (conflicto) | a4:46:b4:e7:a5:30 |
| 192.168.10.69 | Gitea (LXC 112 TYAN) | BC:24:11:30:EF:4E |
| 192.168.10.70 | **Dispositivo desconocido** (conflicto) | 08:cc:81:07:9a:41 |
| 192.168.10.73 | NodeBB (LXC 103 DellT430-2) | BC:24:11:36:90:2C |
| 192.168.10.74 | Dockge/Caddy (LXC 106 TYAN) | BC:24:11:DD:C9:B9 |
| 192.168.10.75 | OMV (VM 100 TYAN) | - |
| 192.168.10.78 | Immich (LXC 104 TYAN) | BC:24:11:2E:96:EC |
| 192.168.10.83 | n8n (LXC 108 TYAN) | BC:24:11:11:FC:30 |
| 192.168.10.85 | Navidrome (LXC 109 TYAN) | BC:24:11:2B:49:23 |
| 192.168.10.86 | Dashy (LXC 102 TYAN) | BC:24:11:EB:9A:4F |
| 192.168.10.87 | UptimeKuma (LXC 110 TYAN) | BC:24:11:22:73:8C |
| 192.168.10.90 | Horux (VM 108 DellT430-2) | 02:BF:A9:58:B9:04 |
| 192.168.10.91 | Autopartes (VM 104 DellT430-2) | 02:CD:37:96:6B:4F |
| 192.168.10.92 | CAS-PaginasWeb (VM 106 DellT430-2) | 02:49:5F:9E:62:EC |
| 192.168.10.97 | MSP/MeshCentral (VM 113 DellT430-2) | 02:DD:3B:3E:16:90 |
| 192.168.10.100 | SKEEN.MX (VM 100 DellT430-2) | 02:7C:23:A0:4A:1C |
| 192.168.10.105 | OpenClaw (VM 100 Cisco1) | 02:57:2C:98:3E:34 |
| 192.168.10.135 | OpenWebUI (LXC 101 Cisco1) | BC:24:11:8F:0F:87 |
| 192.168.10.140 | CraneGOO (VM 102 Cisco1) | 02:C9:63:B1:E2:D5 |
| 192.168.10.144 | Ryzen PC / Ollama (bare metal) | - |
| 192.168.10.156 | CocinaConAlma/Tandoor (VM 101 DellT430-2) | 02:71:EC:C8:90:07 |
| 192.168.10.167 | Hotel Hacienda (LXC 105 TYAN) | BC:24:11:7C:01:9B |
| 192.168.10.170 | Metabase (LXC 111 TYAN) | BC:24:11:85:90:87 |
| 192.168.10.185 | Proxmox Dell T430 #1 | - |
| 192.168.10.187 | Proxmox Dell T430 #2 | - |
| 192.168.10.254 | Modem ISP | - |
## Servicios Multimedia (Container Dockge - 192.168.10.74)
| Servicio | Puerto | Funcion |
|---|---|---|
| Jellyfin | 8096 | Streaming video |
| Jellyseerr | 5055 | Peticiones multimedia |
| Sonarr | 8989 | Gestion de series |
| Radarr | 7878 | Gestion de peliculas |
| Prowlarr | 9696 | Indexadores |
| Bazarr | 6767 | Subtitulos |
| qBittorrent | 8080 | Descargas |
| Dockge | 5001 | Gestion Docker |
| Caddy | 80/443 | Reverse Proxy |
## Stack de AI
| Componente | Ubicacion | IP | Funcion |
|---|---|---|---|
| Ollama | Ryzen PC (bare metal) | 192.168.10.144:11434 | LLM inference con GPU RTX 3060 |
| OpenWebUI | Cisco1 (LXC 101) | 192.168.10.135:8080 | Interfaz web para chat AI |
| Modelo actual | - | - | qwen3.5:9b (Q4_K_M, 6.6 GB) |
## Pendientes
- [ ] Levantar proyecto Afterlife (restauracion de juegos)
- [ ] Acceder al switch Cisco para configurar VLANs
- [ ] Reparar/reemplazar NIC re1 del firewall OPNsense
- [ ] Configurar DDNS o Cloudflare Proxy para IP dinamica
- [ ] Configurar alta disponibilidad (failover multi-sitio)
- [ ] Arrancar OpenClaw (actualmente detenido)
- [ ] Investigar dispositivos en 192.168.10.67 y 192.168.10.70 (conflicto)
- [ ] Configurar IP estatica en Odoo (LXC 102 DellT430-2), SocialAutomation, Padel
## Notas importantes
- El firewall OPNsense esta desactivado temporalmente por fallo en NIC re1
- El modem ISP actua como gateway directo (192.168.10.254)
- La IP publica es dinamica - actualmente 201.142.180.120
- Actualizar DNS en Cloudflare cada vez que cambie la IP
- Todas las VMs/containers criticos tienen IP estatica para evitar conflictos DHCP
- El container n8n tiene un workflow desactivado por falta de conexion a PostgreSQL en 192.168.10.148
## Servicios Hotel Hacienda (requieren inicio manual tras reboot)
`ash
pct enter 105
cd /home/HotelEntregaNoTocar/backend/hotel_hacienda
nohup node server.js > /tmp/hotel-backend.log 2>&1 &
disown
cd /home/HotelEntregaNoTocar/frontend/Frontend-Hotel
nohup npx vite --host > /tmp/hotel-frontend.log 2>&1 &
disown
exit
`
## Cambios recientes (24 de abril 2026)
- Corte de luz causo reinicio completo de infraestructura
- DHCP del modem asigno IPs en conflicto entre servidores
- Configurada IP estatica en TODOS los containers/VMs criticos
- Hotel cambio de 192.168.10.67 a 192.168.10.167 (por conflicto con dispositivo Dell)
- Metabase cambio de 192.168.10.70 a 192.168.10.170 (por conflicto con dispositivo HP/TI)
- OpenWebUI asignado IP estatica 192.168.10.135
- SKEEN.MX asignado IP estatica 192.168.10.100
- NodeBB asignado IP estatica 192.168.10.73
- Caddyfile actualizado con nuevas IPs
- Todos los servicios externos verificados y funcionando
---
*Documentacion actualizada el 24 de Abril de 2026*
*Consultoria-AS*